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TTR 


Time To Remediate 


Time Organization is left exposed to risk 
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WannaCry Timeline and Remediation 


700 


MS17-010 Patch Release EternalBlue m ie | WannaCry 
600 Exploit MEAL o 


Authenticated Scan / Agent Detection 


THOUSANDS 


500 New Remote Detection 


400 
300 


200 


© Qualys. 


Effective Vulnerability Management Program 


Asset Vulnerability and 
Inventory Config Assessment 


Do you know what all your 


assets are and where they are? Do you know how many open 


vulnerabilities & misconfigs? 


Threat Risk and 
Prioritization 


Patch p= g 


Management 


Can you prioritize remediation 
How can you deploy patches to based on threat intelligence? 
close high-impact vulnerabilities? 
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Asset Management Today 


Rapid expansion of IT infrastructure 


Highly dynamic environments with 
enterprise discovery tools make it hard to 
keep on top of up-to-date asset inventory 


CMDBSs are out-of-date 


Manual grouping and classification of 
assets doesn't scale 
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Vulnerability Management 


More devices, more vulnerabilities 
To auth or not to auth? 


Prioritization needs real-time Threat 
Intelligence & asset context 


Risk-based approach is lacking 
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Remediation Response 


More than just patching 


Struggle to find right mitigation 


Decentralized IT tools & teams 
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VMDR 


Vulnerability Management, Detection and Response 


True Risk Based Vulnerability Management 
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cro 


One solution to Discover, Assess, Prioritize and Fix critical vulnerabilities 
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Qualys VMDR - A Game Changer 


Discover & Inventory all managed 
& unmanaged assets - Global Al 


Auto Organize assets with 
dynamic rule-based tagging 


Continuous Vulnerability 
Assessment with Cloud Agents 


Instant threat prioritization with 
new context engine 


Rapid Response with built-in 
Remediation 
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Quick Demo 


VMDR - Simple Asset-Based Model 


Unlimited Cloud Agents Asset Categorization 
Unlimited Virtual Scanners Asset Normalization 
Unlimited Passive Sensors [UAS] huelmet so Uke 

a Configuration Assessment 
Certificate Inventory 


CIS Benchmarks 
Cloud Inventory Continuous Monitoring 


Container Inventory Patch Detection and CVE Correlation 
Mobile Device Inventory CI/CD DevOps Integration 
Reduce your TTR Starting March 2020! 
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Hello John! 


You are now upgraded to the 


VMDR Experience 


Discover, assess, prioritize, and patch critical vulnerabilities in real time, 
across your global hybrid-IT landscape all from a single solution 


How does it impact me? 


VMDR Experience upgrade gives you 


VMDR Experience UI Upgrade 
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Fully Customizable Dashboards 


Fully customizable dynamic dashboards with trending information 


Jashboar elp you visualize your assets and prioritize vulnerabilities fc 


emediation. Add widgets with search queries to se 


You ca O expo nd Dashboi ations to a file 


son format allowing you to share them betwe ( within th 
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Cloud Platform Architecture 


Out-of-Band Sensors 
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A i e 
Virtual PA Scanner 
Scanners i Appliances 


Cloud Connectors 
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Physical 


Legacy data centers 
Corporate infrastructure 


Continuous security and 
compliance scanning 


Qualys Sensor Platform 
Scalable, self-updating & centrally managed 
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Virtual 


Private cloud 
infrastructure 


Virtualized Infrastructure 


Continuous security and 
compliance scanning 
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Cloud/Container 


Commercial laaS & PaaS 
clouds 


Pre-certified in market 
place 


Fully automated with 
API orchestration 


Continuous security and 
compliance scanning 
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Cloud Agents 
Light weight, multi- 
platform 


On premise, elastic 
cloud & endpoints 


Real-time data collection 


Continuous evaluation 
on platform for security 
and compliance 


Passive 


Passively sniff on 
network 


Real-time device 
discovery & 
identification 


Identification of APT 
network traffic 


Extract malware files 
from network for 
analysis 
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API 


Integration with Threat 
Intel feeds 


CMDB Integration 


Log connectors 


Qualys Cloud Platform 


19+ products providing comprehensive 
suite of security solutions 


15,000+ customers 


8 shared cloud platforms across North : | 

America, Europe & Asia © 

95+ private clouds platforms deployed = f: 

globally... on-prem, AWS, Azure, GCP à ÉA 
es 


19+ PB storage and 27000 cores 
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Qualys Cloud Platform 


3+ billion IP scans/audits per year 

50,000+ Scanner Appliances © 
31 million Cloud Agents 
2+ trillion security events annually © 


5+ billion messages daily across Kafka x A 
clusters 


3.2+ trillion data points indexed in our C5 
Elasticsearch clusters 
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Continued Platform 
Expansion 


ICS OT Environments 


SaaS Security & Compliance 
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More DRs coming 
Soon 


wr p tigi 4. Winer 


Endpoint Detection & Response E a ee gl ÈN 
Cloud Detection & Response =+ gi 
Container Detection & Response ÅR y N 
Mobile Device Detection & Response | a. 


SaaS Security Detection & Response 
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Security Analytics, 
Correlation & Data Lake 


Powerful cloud-based correlation 
and analytics of known & 
unknown threats 


Qualys built-in! 
Plug-n-Play analytics 
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